v147 · Security · JavaScript
Attack Surface Visualizer
Draw attack arrows from a public website to home network devices. See how Chrome 147's Private Network Access policy — preflight required, permission prompt, or outright block — changes the outcome for each target.
Click a target device to draw an attack arrow from the public website and see the policy result.
public web
evil-site.com
public origin
router
Home router
192.168.1.1
LAN devices
Printer
192.168.1.10
IP Camera
192.168.1.20
Smart TV
192.168.1.30
NAS
192.168.1.40
localhost
127.0.0.1
Attack analysis
Click a device above to analyse an attack vector.
Run fetch simulation
Fire real fetch() attempts to local addresses from this page and observe what the browser actually returns.
Click "Run attack simulation" to fire real fetch() calls.